96 matches found
bryaktestgrid (>=0.0.1, <=0.0.6), dijit (>=1.11.0, <=1.11.5) +3 more potentially affected by CVE-2010-2273 via dojo (>=1.11.0, <=1.11.5)
dojo NPM version =1.11.0, =0.0.1, =1.11.0, =0.1.0, =1.11.0, =0.0.1, =0.5.24 Source cves: CVE-2010-2273 Source advisory: GHSA-536Q-8GXX-M782...
PT-2018-14999
Name of the Vulnerable Software and Affected Versions Dotcms versions prior to 5.0.4 Description An issue was discovered that allows attackers to perform XSS attacks. The attack can be performed via the inode, identifier, or fieldName parameter in the "html/js/dotcms/dijit/image/image tool.jsp"...
dijit (>=1.12.1, <=1.12.3), dojox (>=1.12.1, <=1.12.3) potentially affected by CVE-2018-1000665 via dojo (>=1.12.1, <=1.12.3)
dojo NPM version =1.12.1, =1.12.1, =1.12.1, =1.12.3 Source cves: CVE-2018-1000665 Source advisory: MEND:CVE-2018-1000665...
dijit (>=1.9.8, <=1.10.7), dojox (>=1.9.9, <=1.10.3) +2 more potentially affected by CVE-2018-1000665 via dojo (>=1.9.1, <=1.10.7)
dojo NPM version =1.9.1, =1.9.8, =1.9.9, =1.2.0, =0.3.0-alpha.1, =0.3.0-alpha.32 Source cves: CVE-2018-1000665 Source advisory: MEND:CVE-2018-1000665...
bryaktestgrid (>=0.0.1, <=0.0.6), dijit (>=1.11.0-rc1, <=1.11.5) +3 more potentially affected by CVE-2018-1000665 via dojo (>=1.11.0-rc1, <=1.11.5)
dojo NPM version =1.11.0-rc1, =0.0.1, =1.11.0-rc1, =0.1.0, =1.11.0-rc1, =0.0.1, =0.5.24 Source cves: CVE-2018-1000665 Source advisory: MEND:CVE-2018-1000665...
Dojo Toolkit Cross-Site Scripting Vulnerability
Dojo Toolkit is the Dojo Foundation an open source DHTML toolkit implemented in the JavaScript language . The toolkit is easy to build interactive user interface , Dojo's extension package can make the user's code easier to maintain , less coupling , etc. dijit.Editor is one of the WYSIWYG editor...
Cross-site Scripting (XSS)
dijit is vulnerable to cross-site scripting XSS attacks. Attackers can execute arbitrary webscript through the onload attributes of SVG elements...
DEBIAN-CVE-2018-6561
dijit.Editor in Dojo Toolkit 1.13 allows XSS via the onload attribute of an SVG element...
UBUNTU-CVE-2018-6561
dijit.Editor in Dojo Toolkit 1.13 allows XSS via the onload attribute of an SVG element...
@hpcc-js/dgrid-shim (>=0.0.29, <=0.1.12), bryaktestgrid (>=0.0.1, <=0.0.6) +3 more potentially affected by CVE-2018-6561 via dijit (>=1.8.13, <=1.13.0)
dijit NPM version =1.8.13, =0.0.29, =0.0.1, =0.1.0, =1.8.13, =0.0.1, =0.5.24 Source cves: CVE-2018-6561 Source advisory: MEND:CVE-2018-6561...
dijit (>=1.7.11, <=1.8.14), dojox (>=1.8.13, <=1.8.14) +1 more potentially affected by CVE-2015-5654 via dojo (>=1.7.11, <=1.8.14)
dojo NPM version =1.7.11, =1.7.11, =1.8.13, =0.1.1, =0.1.3 Source cves: CVE-2015-5654 Source advisory: MEND:CVE-2015-5654...
DEBIAN-CVE-2010-2275
Cross-site scripting XSS vulnerability in dijit/tests/testCommon.js in Dojo Toolkit SDK before 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the theme parameter, as demonstrated by an attack against dijit/tests/form/testButton.html...
dijit (>=1.10.0, <=1.10.7), dojox (1.10.3) +1 more potentially affected by CVE-2010-2273 via dojo (>=1.10.0, <=1.10.7)
dojo NPM version =1.10.0, =1.10.0, =0.3.0-alpha.1, =0.3.0-alpha.32 Source cves: CVE-2010-2273 Source advisory: MEND:CVE-2010-2273...
dijit (>=1.12.1, <=1.12.3), dojox (>=1.12.1, <=1.12.3) potentially affected by CVE-2010-2273 via dojo (>=1.12.1, <=1.12.3)
dojo NPM version =1.12.1, =1.12.1, =1.12.1, =1.12.3 Source cves: CVE-2010-2273 Source advisory: MEND:CVE-2010-2273...
CVE-2010-2275
Cross-site scripting XSS vulnerability in dijit/tests/testCommon.js in Dojo Toolkit SDK before 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the theme parameter, as demonstrated by an attack against dijit/tests/form/testButton.html...
CVE-2010-2275: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in dijit/tests/testCommon.js in Dojo Toolkit SDK before 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the theme parameter, as demonstrated by an attack against dijit/tests/form/testButton.html...